• Home
  • Legal
  • Export information on Sophos products

Export information on Sophos products

General rules governing, and information relating to, the export of Sophos products.

Sophos is committed to complying with the laws and regulations relating to export controls. As part of this compliance effort, Sophos agreements contain provisions requiring Sophos customers and partners to ensure compliance with these laws and regulations. In order to assist our customers and partners, Sophos uses this portion of its web site to communicate export control information specific to its products to our customers and partners. This information may be required for shipping documentation, record keeping, or post-shipment reporting.

Customers and partners are encouraged to familiarize themselves with the import regulations of their country to ensure compliance with their specific regulations and to ensure timely delivery of Sophos products they may purchase.

NOTE: The contents on this website are not tailored to the needs of a specific entity or a particular export scenario. The information provided below is for general information purposes only. Exportation of restricted goods is a complex area and while Sophos will make reasonable efforts to maintain the information on this website, you are responsible for seeking your own legal advice and ensuring your compliance in relation to such matters.

United States Export Controls

Sophos Limited's Export Registration Number ("ERN") is R100018.

Sophos products are subject to US export regulations. In the United States, a branch of the U.S. Department of Commerce known as the Bureau of Industry and Security regulates exports through the Export Administration Regulations (EAR). These regulations spell out the export restrictions on a wide variety of goods, software, and technologies. Sophos products may not be exported to Cuba, Iran, North Korea, Syria, or Sudan, but most products may be exported to other countries subject to the applicable import regulations of such country (see the restrictions specific to Table 3 products below). The US export classification control numbers for Sophos products are set out in Table 1 below.
Some Sophos products are subject to export restrictions because they include encryption technology. In the case of Sophos products containing encryption, a one-time government technical review is usually required prior to export. Once a review has been completed, products may become eligible for a particular license exception, such as ENC. This exception may then be used by other exporters, as provided by the U.S. EAR. See the following URLs for more information on US export regulations:
www.bis.doc.gov/policiesandregulations/, www.bis.doc.gov/index.htm

UK Export Controls

Certain Sophos products have also been classified in accordance UK export controls and may be exported in accordance with the Community General Export Authorisation (CGEA) and Open Individual Export Licences (OIEL), as noted in Table 2 below. Such restrictions apply when Sophos products are exported from the UK. See the following URL for more information on UK export controls:
https://www.gov.uk/beginners-guide-to-export-controls

German Export Controls

The Sophos products listed in Table 3 below have also been classified in accordance with German export controls and may only be exported in accordance with the AGG16 and EU001 general licenses. The Table 3 products may not be exported to: Afghanistan, Angola, Armenia, Azerbaijan, Belarus, Burma (Myanmar), Burundi, Cote d'Ivoire, Cuba, Democratic Republic of Congo, Eritrea, Ethiopia, Guinea, Iraq, Iran, Lebanon, Liberia, Libya, Mozambique, Nigeria, North Korea, Pakistan, Somalia, Sudan, South Sudan, Syria, Tanzania, Uganda, Uzbekistan, Yemen & Zimbabwe. In addition, sales to Government end users and any Military, Para Military, Police, Secret Service (and related organizations) end users are only permitted if such end users are located in the following countries: Australia, Austria, Belgium, Bulgaria, Canada, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Japan, Latvia, Lithuania, Luxembourg, Malta, Netherlands, New Zealand, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey, United Kingdom. See the following URL for more information on German export controls: http://www.bafa.de/bafa/en/export_control/index.html

Products Appearing in More Than One Table

If a product appears in multiple tables below, the applicable export controls of all such countries must be complied with in regards to the exportation of such product.

As noted above, exportation of restricted goods is a complex area and you are responsible for seeking your own legal advice and ensuring your compliance in relation to such matters in the context of your specific export scenario.

Bundled Products

From time-to-time, Sophos may rename or rebundle various products. If you are unsure which of the product names below reflect your purchase, please contact your Sophos Account Manager and they will review your purchase and, upon consultation with the Sophos Legal Department, provide you with the relevant information.

Table 1

Sophos Product ECCN1 License Exception2 CCATS3
Software
Sophos Anti-Spam Interface (SASI) 5D002 (C.1) ENC G076251
Sophos Anti-Virus (SAV) for Mac 5D992 (C) N/A (mass market) G076252
Sophos Anti-Virus (SAV) for UNIX 5D992 (C) N/A (mass market) G076252
Sophos Anti-Virus (SAV) for Linux 5D992 (C) N/A (mass market) G076252
Sophos Anti-Virus Interface (SAVI) 5D002 (C.1) ENC G076251
Sophos Computer Security Scan 5D992 (C) N/A (mass market) G079727
Sophos Endpoint Security & Control 5D992 (C) N/A (mass market) G076250
Sophos Endpoint Security & Data Protection 5D992 (C) N/A (mass market) G076250
Sophos for Microsoft SharePoint 5D992 (C) N/A (mass market) G076094
Sophos Mobile Encryption 5D992 N/A (mass market) N/A
Sophos Mobile Security 5D992 N/A (NLR) N/A
Sophos NAC Advanced 5D002 (C) ENC G076250
Sophos PureMessage for Exchange 5D992 (B) N/A (mass market) G079729
Sophos PureMessage for UNIX 5D992 (C) N/A (mass market) G076094
Sophos PureMessage for Lotus Domino 5D992 (C) N/A (mass market) G076094
Sophos SafeGuard CryptoServer CS and SE software 5D002 ENC (unrestricted) N/A
Sophos SafeGuard CryptoServer Software Development Kit (SDK) 5D002 ENC (unrestricted) N/A
Sophos SafeGuard Enterprise 5D992 (C) N/A (mass market) G077275
Sophos SafeGuard Easy 5D992 (C) N/A (mass market) G077275
Sophos SafeGuard LAN Crypt 5D992 N/A (mass market) N/A
Sophos SafeGuard MailGateway 5D992 N/A (mass market) N/A
Sophos SafeGuard PortProtector 5D992 N/A (NLR) N/A
Sophos SafeGuard PrivateCrypto 5D992 N/A (mass market) N/A
Sophos SafeGuard PrivateDisk 5D992 N/A (mass market) N/A
Sophos SafeGuard RemovableMedia 5D992 N/A (mass market) N/A
Sophos Security Monitor for iPhone EAR99 N/A N/A
Sophos Virtual Email Appliance 5D992 N/A (mass market) N/A
Sophos Virtual Web Appliance 5D992 N/A (mass market) N/A
Sophos UTM Appliance5 5D002 (A.1) ENC G146757
Sophos UTM100 Appliance 5D992 N/A (mass market) G146757
Appliances
Sophos Email Appliance ES100 5A002 (A.1) ENC G078960
Sophos Email Appliance ES1000 5A002 (A.1) ENC G050803
Sophos Email Appliance ES1100 5A002 (A.1) ENC G073773
Sophos Email Appliance ES4000 5A002 (A.1) ENC G043583
Sophos Email Appliance ES5000 5A002 (A.1) ENC G068377
Sophos Email Appliance ES8000 5A002 (A.1) ENC G068377
Sophos Management Appliance SM2000 5A002 (A.1) ENC G068809
Sophos Management Appliance SM5000 5A002 (A.1) ENC G070752
SafeGuard CryptoServer CS and SE (HSM) Appliance5 5A002 ENC (unrestricted) N/A
Sophos Web Appliance WS100 5A002 (A.1) ENC G078960
Sophos Web Appliance WS500 5A002 (A.1) ENC G068810
Sophos Web Appliance WS1000 5A002 (A.1) ENC G051630
Sophos Web Appliance WS1100 5A002 (A.1) ENC G068809
Sophos Web Appliance WS5000 5A002 (A.1) ENC (unrestricted) G138827
Sophos UTM Appliance5 5D002 (A.1) ENC G146757
Sophos UTM100 Appliance 5D992 N/A (mass market) G146757
Components
Astaro Mail Archiving (AMA) 5D992 N/A (mass market) N/A
PureMessage for Microsoft Exchange (includes Anti-Spam Interface) 5D992 N/A (mass market) N/A
Sophos Access Points 5A992 N/A (mass market) N/A
Sophos Anti Virus (SAV) (includes Windows 9x/NET, 2000+ versions) 5D992(C) N/A (mass market) G076252
Sophos LAN Crypt5 5D992 N/A (mass market) N/A
Sophos Management Communications System (MCS) 5D992 N/A (mass market) N/A
Sophos Mobile Control5 5D992 N/A (mass market) N/A
Sophos Mobile Encryption 5D992 N/A (mass market) N/A
Sophos Network Access Control (NAC) 5D002 ENC G076250
Sophos Patch Assessment (SPA) 5D002 ENC N/A
Sophos RED 5A992 N/A (mass market) N/A

Table 2

Sophos Product Control Entry4 ECO Reference No.
Sophos Anti-Spam Interface (SASI) 5D002c1 ERE2009/003981
Sophos Anti-Virus (SAV) for Mac 5D002c1 ERE2009/003971
Sophos Anti-Virus (SAV) for UNIX 5D002c1 ERE2009/003971
Sophos Anti-Virus (SAV) for Linux 5D002c1 ERE2009/003971
Sophos Anti-Virus Interface (SAVI) 5D002c1 ERE2009/003981
Sophos Endpoint Security & Control 5D002c1 ERE2009/003966
Sophos Endpoint Security & Data Protection 5D002c1 ERE2009/003966
Sophos for Microsoft SharePoint NLR ERE2009/003881
Sophos NAC Advanced 5D002c1 ERE2009/003966
Sophos PureMessage for Exchange NLR ERE2009/003881
Sophos PureMessage for UNIX NLR ERE2009/003881
Sophos PureMessage for Lotus Domino NLR ERE2009/003881
Sophos SafeGuard Enterprise NLR ERE2009/002227
Sophos SafeGuard Easy NLR ERE2009/002227

Table 3

Sophos UTM Appliance5
SafeGuard CryptoServer CS and SE (HSM) Appliance5
Sophos Mobile Control5
Sophos LAN Crypt5

  1. ECCN
    Export Control Classification Number assigned by the U.S. Department of Commerce, Bureau of Industry and Security (BIS) in the Commerce Control List (CCL). This is the fundamental designation indicating the level of control for an item.

    Please review the current Commerce Control List Overview and the Country Chart for up to date information on the current countries to which exports are restricted for the referenced ECCNs. Currently, unless otherwise restricted by another country's more restrictive controls, mass market items may be exported without a license to any destination, except to embargoed/sanctioned countries (Cuba, Iran, North Korea, Sudan, and Syria) or to prohibited end-users or for prohibited end-uses.
  2. License Exception ENC
    Sophos received a License Exception from the U.S. Department of Commerce for each of the appliance products after submitting each to a one-time significant technical review by the National Security Agency (NSA). See the following URL for further information on the ENC License Exception: http://www.bis.doc.gov/encryption/enc_faqs.htm#7
  3. CCATS (Commodity Classification Automated Tracking System)
    This is the code number assigned by BIS to products that it has classified against the CCL. If no CCATS number is provided, this indicates that the products have been classified under the Department of Commerce, Bureau of Industry and Security self-classification regulations.
  4. NLR
    This abbreviation indicates that UK Export Control Organization ("ECO") has indicated that the product does not require a license for export from the UK ("No License Required").
  5. Subject to German Export Control
    The UTM and HSM products are subject to German export controls as 5A002 or 5D002 products and may only be exported in accordance with the AGG16 and EU001 general licenses as further detailed above.
© 1997 - 2013 Sophos Ltd. All rights reserved. Legal Privacy Cookie Information